CVE-2022-50889
published 2025-12-30CVE-2022-50889: In the Linux kernel, the following vulnerability has been resolved: dm integrity: Fix UAF in dm_integrity_dtr() Dm_integrity also has the same UAF problem when…
PriorityP419low5.5
EPSS
0.18%
8.1th percentile
In the Linux kernel, the following vulnerability has been resolved:
dm integrity: Fix UAF in dm_integrity_dtr()
Dm_integrity also has the same UAF problem when dm_resume()
and dm_destroy() are concurrent.
Therefore, cancelling timer again in dm_integrity_dtr().
Affected
17 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 6.1.4-1 (bookworm) | linux 6.1.4-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= 7eada909bfd7ac90a4522e56aa3179d1fd68cd14 < 792e51aac376cfb5bd527c2a30826223b82dd177 | 792e51aac376cfb5bd527c2a30826223b82dd177 |
| linux | linux | >= 7eada909bfd7ac90a4522e56aa3179d1fd68cd14 < a506b5c92757b034034ef683e667bffc456c600b | a506b5c92757b034034ef683e667bffc456c600b |
| linux | linux | >= 7eada909bfd7ac90a4522e56aa3179d1fd68cd14 < 9215b25f2e105032114e9b92c9783a2a84ee8af9 | 9215b25f2e105032114e9b92c9783a2a84ee8af9 |
| linux | linux | >= 7eada909bfd7ac90a4522e56aa3179d1fd68cd14 < 9f8e1e54a3a424c6c4fb8742e094789d3ec91e42 | 9f8e1e54a3a424c6c4fb8742e094789d3ec91e42 |
| linux | linux | >= 7eada909bfd7ac90a4522e56aa3179d1fd68cd14 < b6c93cd61afab061d80cc842333abca97b289774 | b6c93cd61afab061d80cc842333abca97b289774 |
| linux | linux | >= 7eada909bfd7ac90a4522e56aa3179d1fd68cd14 < f50cb2cbabd6c4a60add93d72451728f86e4791c | f50cb2cbabd6c4a60add93d72451728f86e4791c |
| linux | linux_kernel | >= 0 < 5.10.178-1 | 5.10.178-1 |
| linux | linux_kernel | >= 0 < 6.1.4-1 | 6.1.4-1 |
| linux | linux_kernel | >= 0 < 6.1.4-1 | 6.1.4-1 |
| linux | linux_kernel | >= 0 < 6.1.4-1 | 6.1.4-1 |
| linux | linux_kernel | >= 4.12.0 < 5.4.229 | 5.4.229 |
| linux | linux_kernel | >= 5.11.0 < 5.15.87 | 5.15.87 |
| linux | linux_kernel | >= 5.16.0 < 6.0.18 | 6.0.18 |
| linux | linux_kernel | >= 5.5.0 < 5.10.163 | 5.10.163 |
| linux | linux_kernel | >= 6.1.0 < 6.1.4 | 6.1.4 |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
kernel: dm integrity: Fix UAF in dm_integrity_dtr()
vendor_redhat·2025-12-30·CVSS 5.5
CVE-2022-50889 [LOW] CWE-366 kernel: dm integrity: Fix UAF in dm_integrity_dtr()
kernel: dm integrity: Fix UAF in dm_integrity_dtr()
In the Linux kernel, the following vulnerability has been resolved:
dm integrity: Fix UAF in dm_integrity_dtr()
Dm_integrity also has the same UAF problem when dm_resume()
and dm_destroy() are concurrent.
Therefore, cancelling timer again in dm_integrity_dtr().
A use-after-free vulnerability was found in the Linux kernel's device mapper integrity subsystem. When dm_resume() and dm_destroy() execute concurrently, a timer may fire and access freed memory because dm_integrity_dtr() did not properly cancel the timer before freeing resources. The fix adds an additional timer cancellation in the destructor path.
Statement: This flaw requires a race condition between dm_resume() and dm_destroy() operations on a dm-integrity device. While use-
Debian
CVE-2022-50889: linux - In the Linux kernel, the following vulnerability has been resolved: dm integrit...
vendor_debian·2022
CVE-2022-50889 CVE-2022-50889: linux - In the Linux kernel, the following vulnerability has been resolved: dm integrit...
In the Linux kernel, the following vulnerability has been resolved: dm integrity: Fix UAF in dm_integrity_dtr() Dm_integrity also has the same UAF problem when dm_resume() and dm_destroy() are concurrent. Therefore, cancelling timer again in dm_integrity_dtr().
Scope: local
bookworm: resolved (fixed in 6.1.4-1)
bullseye: resolved (fixed in 5.10.178-1)
forky: resolved (fixed in 6.1.4-1)
sid: resolved (fixed in 6.1.4-1)
trixie: resolved (fixed in 6.1.4-1)
OSV
CVE-2022-50889: In the Linux kernel, the following vulnerability has been resolved: dm integrity: Fix UAF in dm_integrity_dtr() Dm_integrity also has the same UAF pro
osv·2025-12-30
CVE-2022-50889 CVE-2022-50889: In the Linux kernel, the following vulnerability has been resolved: dm integrity: Fix UAF in dm_integrity_dtr() Dm_integrity also has the same UAF pro
In the Linux kernel, the following vulnerability has been resolved: dm integrity: Fix UAF in dm_integrity_dtr() Dm_integrity also has the same UAF problem when dm_resume() and dm_destroy() are concurrent. Therefore, cancelling timer again in dm_integrity_dtr().
OSV
dm integrity: Fix UAF in dm_integrity_dtr()
osv·2025-12-30
CVE-2022-50889 dm integrity: Fix UAF in dm_integrity_dtr()
dm integrity: Fix UAF in dm_integrity_dtr()
In the Linux kernel, the following vulnerability has been resolved:
dm integrity: Fix UAF in dm_integrity_dtr()
Dm_integrity also has the same UAF problem when dm_resume()
and dm_destroy() are concurrent.
Therefore, cancelling timer again in dm_integrity_dtr().
GHSA
GHSA-xvv5-rwhg-mg45: In the Linux kernel, the following vulnerability has been resolved:
dm integrity: Fix UAF in dm_integrity_dtr()
Dm_integrity also has the same UAF p
ghsa_unreviewed·2025-12-30
CVE-2022-50889 GHSA-xvv5-rwhg-mg45: In the Linux kernel, the following vulnerability has been resolved:
dm integrity: Fix UAF in dm_integrity_dtr()
Dm_integrity also has the same UAF p
In the Linux kernel, the following vulnerability has been resolved:
dm integrity: Fix UAF in dm_integrity_dtr()
Dm_integrity also has the same UAF problem when dm_resume()
and dm_destroy() are concurrent.
Therefore, cancelling timer again in dm_integrity_dtr().
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2022-50889 kernel: dm integrity: Fix UAF in dm_integrity_dtr()
bugzilla·2025-12-30
CVE-2022-50889 [LOW] CVE-2022-50889 kernel: dm integrity: Fix UAF in dm_integrity_dtr()
CVE-2022-50889 kernel: dm integrity: Fix UAF in dm_integrity_dtr()
In the Linux kernel, the following vulnerability has been resolved:
dm integrity: Fix UAF in dm_integrity_dtr()
Dm_integrity also has the same UAF problem when dm_resume()
and dm_destroy() are concurrent.
Therefore, cancelling timer again in dm_integrity_dtr().
Discussion:
Upstream advisory:
https://lore.kernel.org/linux-cve-announce/2025123015-CVE-2022-50889-71c4@gregkh/T
Wiz
CVE-2022-50889 Impact, Exploitability, and Mitigation Steps | Wiz
blogs_wiz
CVE-2022-50889 CVE-2022-50889 Impact, Exploitability, and Mitigation Steps | Wiz
## CVE-2022-50889 :
Linux Kernel vulnerability analysis and mitigation
In the Linux kernel, the following vulnerability has been resolved:
dm integrity: Fix UAF in dm_integrity_dtr()
Dm_integrity also has the same UAF problem when dm_resume()
and dm_destroy() are concurrent.
Therefore, cancelling timer again in dm_integrity_dtr().
Source : NVD
Published December 30, 2025
CNA Score N/A
Affected Technologies
Linux Kernel
Linux Debian
Has Public Exploit No
Has CISA KEV Exploit No
CISA KEV Release Date N/A
CISA KEV Due Date N/A
Exploitation Probability Percentile (EPSS) 10.8
Exploitation Probability (EPSS) N/A
Affected packages and libraries
kernel-64k-debug-modules
kernel-debug-modules-extra
Sources
NVD
Debian 11, 12, 13, 14 Has Fix Added at: Dec 31, 2025
Echo Has Fix
https://git.kernel.org/stable/c/792e51aac376cfb5bd527c2a30826223b82dd177https://git.kernel.org/stable/c/9215b25f2e105032114e9b92c9783a2a84ee8af9https://git.kernel.org/stable/c/9f8e1e54a3a424c6c4fb8742e094789d3ec91e42https://git.kernel.org/stable/c/a506b5c92757b034034ef683e667bffc456c600bhttps://git.kernel.org/stable/c/b6c93cd61afab061d80cc842333abca97b289774https://git.kernel.org/stable/c/f50cb2cbabd6c4a60add93d72451728f86e4791c
2025-12-30
Published